4324 matches found
PT-2023-29782 · Unknown · Wenwenaicms
Name of the Vulnerable Software and Affected Versions: WenwenaiCMS version 1.0 Description: The issue allows a remote attacker to escalate privileges due to insecure permissions. Recommendations: For WenwenaiCMS version 1.0, update to a version that addresses the insecure permissions issue...
CVE-2023-40361
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
CVE-2023-40361
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
CVE-2023-40361
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
Design/Logic Flaw
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
CVE-2023-40361
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
CVE-2023-40361
SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...
CVE-2023-40361
CVE-2023-40361 affects SECUDOS Qiata (DOMOS OS) 4.13. The issue arises from insecure permissions on the previewRm.sh daily cronjob: every user on the system has write access to previewRm.sh, which is executed by root, enabling a low-privilege user to modify the script and potentially escalate pri...
CVE-2022-42150
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
CVE-2022-42150
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
Default configuration
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
CVE-2022-42150
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
CVE-2022-42150
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
CVE-2022-42150
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...
CVE-2022-42150
This CVE (CVE-2022-42150) affects TinyLab linux-lab v1.1-rc1 and cloud-lab v0.8-rc2 (also v1.1-rc1). The root cause is insecure permissions arising from the default configuration, which could enable Container Escape. Public details in connected sources corroborate the vulnerability and its impact...
PT-2023-14066
Name of the Vulnerable Software and Affected Versions TinyLab linux-lab version 1.1-rc1 TinyLab cloud-lab version 0.8-rc2 Description The default configuration of TinyLab linux-lab and cloud-lab could cause Container Escape due to insecure permissions. Recommendations For TinyLab linux-lab versio...
PT-2023-27411 · Secudos · Secudos Qiata
Name of the Vulnerable Software and Affected Versions: SECUDOS Qiata DOMOS OS version 4.13 Description: The issue is related to insecure permissions for the previewRm.sh daily cronjob. An attacker needs access as a low-privileged user to the underlying DOMOS system to exploit this. Every user on...
Medium: docker
Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...
TSplus Security Vulnerabilities
TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus Remote Work version 16.0.0.0, which originates from setting insecure file and folder permissions that could allow a malicious user to manipulate the contents of a file or change a legitimate file in...